Re: [Netstack] OVS+iptables

2012-05-16 Thread Dan Wendlandt
Salvatore is correct. Thankfully, there may be some even easier options that allow us to still use iptables with OVS. I'm planning on exploring them with the help of some OVS team members as part of my Folsom-2 work on security groups for Quantum. Dan On Wed, May 16, 2012 at 8:45 AM, Salvatore

Re: [Netstack] OVS+iptables

2012-05-16 Thread Roman Sokolkov
2012/5/16 Salvatore Orlando > Hi Roman! > > It seems that iptables and open vswitch do not play nicely together, in > particular when the rules need to be applied directly on the VIF ports. > As discussed in the "limitations" section of the plugin's documentation: > http://openvswitch.org/opensta

Re: [Netstack] OVS+iptables

2012-05-16 Thread Salvatore Orlando
Re-sending as it seems that for some reason the message was not delivered to the list. Salvatore > -Original Message- > From: Salvatore Orlando > Sent: 16 May 2012 16:46 > To: Roman Sokolkov; netstack@lists.launchpad.net > Subject: RE: [Netstack] OVS+iptables > &

Re: [Netstack] OVS+iptables

2012-05-16 Thread Salvatore Orlando
Hi Roman! It seems that iptables and open vswitch do not play nicely together, in particular when the rules need to be applied directly on the VIF ports. As discussed in the "limitations" section of the plugin's documentation: http://openvswitch.org/openstack/documentation/ For the blueprint yo